...
The local definition of attributes (isn't this semantics not schema?) in any given global schema, the interpretation of metadata and trust frameworks, all of this creates a space where it is very difficult to share information that will meet the expectation of relying parties.
Work in this space
Common language - Schema
Efforts in this space:
...
- Attribute Assurance Profiles - ???'' .. e.g. different LoA for attributes based if they are self reported or proofed at a high level
Consent
- ???
Context
- ???
Governance
A driver for the exploration of attribute management is the growing economy behind the mining and exchange of attribute information. We see here the overlap of financial reward and privacy regulation; overlaps such as this generally see the creation of some kind of governance model. That governance may be formal regulation, it may be accepted industry standards groups, or some other model.
Recommendations
Where is more effort/discussion required?
- Governance
- Context
- Query Language
- Attributes
- There needs to be effort around the normalization of a base identity attribute set. While we see some work going on in the SCIM and OIX-AX arenas, work needs to bridge that and any other efforts together to make a cohesive attribute set.